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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions, and listings of claims in the application. 
1.-5. (Canceled) 

6. (Currently amended) A network security method of realizing secure communication 
between the internal network and the external network by utilizing a network security system, 
said network security system comprises a firewall arranged between the internal network and the 
external network, a first port and a second port configured at the both sides of the firewall, and a 
trusted node arranged between the firewall and the external network; and 

wherein the trusted node comprises: 
a media-stream receiving port; 

a data forward unit, which is used to forward the data transported between the 
internal network and the external network; 

a signaling channel selection unit, which is used to select signaling transmission 
charmel for transmitting the data so as to implement the convergence of signaling; 

a call channel selection unit, which is used to select a media-stream receiving port 
in the trusted node for communicating with the internal network; and 

a control unit, which is used to control the operations of all the other units; 
wherein the network security method comprises the following st e ps of : 

A. establishing a call connection between the internal network and the external 
network by means of the trusted node; 
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B. selecting a media-stream receiving port for communicating witli the internal 
network in the trusted node; and 

C. the trusted node forwarding the data transported between the internal network 
and the external network, and at the same time, converging the data from the second port 
by the selected media-stream receiving port; 

wherein Step B comprises: 

Bl. transmitting an Open Logical Channel signaling, bv the internal 
network, to the trusted node: 

B2. the trusted node informing the internal network of the selected media- 
stream receiving port; and 

B3. the trusted node transmitting the Open Logical Ch annel signaling to 
the external network to establish a corresponding charmel . 

7. (Canceled) 

8. (Previously presented) The network security method according to claim 6, wherein 
the Step C comprises the following: 

CI. the selected media-stream receiving port of the trusted node receiving all the 
data from the internal network, and forwarding the data to the external network; 

C2. the selected media-stream receiving port of the trusted node forwarding the 
data transmitted by the external network to the internal network. 
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9. (Previously presented) The network secxirity method according to claim 6, wherein 
the Step A comprises a step of selecting Q931 channel for transmitting signaling. 

10. (Previously presented) The network security method according to claim 6, further 
comprises a step of implementing load balance among a plurality of trusted nodes when the data 
are forwarded. 

11. (Canceled) 

12. (Previously presented) The network security method according to claim 8, further 
comprises a step of implementing load balance among a plurality of trusted nodes when the data 
are forwarded. 

13. (Previously presented) The network security method according to claim 9, further 
comprises a step of implementing load balance among a plurality of trusted nodes when the data 
are forwarded. 



4 



